During MVP Summit, I met @luke.geek.nz, the legend who nominated me and helped me become a Microsoft MVP. Honored 🔥

Enjoying Seattle with @rios.engineer @johnlokerse.dev @jdops.bsky.social

Underway to Redmond for the MVP Summit! 💪🏻Together with @johnlokerse.dev

cloudtips.nl/take-control... The FinOps Toolkit helps accelerate your FinOps journey by offering starter kits, scripts, and advanced solutions to automate and extend the Microsoft Cloud. In this blog we will use the Azure Verified Module pattern to deploy the Azure FinOps Toolkit — FinOps Hub

Azure Sandbox is a Terraform-based project designed to simplify the deployment of sandbox environments in Azure. In this blog, I will walk you through deploying Azure Sandbox and getting started. 🔥 cloudtips.nl/the-azure-sa...

🔥 Azure Bastion has introduced support for signing in with Microsoft Entra ID when using RDP to access Windows virtual machines directly from the Azure portal. cloudtips.nl/entra-id-sup...

🔥Azure Service Groups make it possible to bring resources together and manage them, even when they are spread across multiple subscriptions and resource groups, without being tied to the default Azure hierarchy. cloudtips.nl/azure-servic...

In this blog, I will show you how to get started with the Bicep console and how it supports my daily development workflow, so it can save you time as well. cloudtips.nl/the-azure-bi...

What if I told you that you can export your Conditional Access policies to PowerPoint, providing a high-level overview of your security posture? youtu.be/ANZLw1jkX8s?...

🔥 It is here. The unified tenant configuration management (UTCM) APIs allow administrators to control and manage configuration settings across a single workload or multiple workloads within the organization. cloudtips.nl/unified-tena...

How do we combine strong governance with automation in a structured way? This is where Enterprise Policy as Code, or EPAC, comes into play. cloudtips.nl/deploy-azure...

Recently, in a customer project, I had to switch from Passthrough Authentication to Password Hash Synchronization. That experience inspired me to write this blog for anyone who receives the same assignment but is unsure how to approach it. 💪🏻 cloudtips.nl/microsoft-en...

Many organizations deploy AI solutions on Microsoft Azure with a strong focus on innovation and speed. What is often underestimated is the importance of a well designed foundation. cloudtips.nl/this-is-why-...

🔥 Curious how the future of secure access with Managed Identities and Workload Identity Federation helps you move beyond risky secrets and certificates? medium.com/microsoftazu...

🔥 Want to know how to protect your Microsoft Entra External ID tenant against bad bots and malicious attackers? cloudtips.nl/protect-your...

Did somebody said snow? ⛄️❄️

First of all, I have to say that 2025 was an incredible year. I am truly grateful for everyone who supported my community contributions and helped me grow along the way. cloudtips.nl/reflecting-o...

In this blog I will show how to configure Microsoft Entra Private Access to tunnel selected application traffic through a private network in order to meet the access control policy of an application that depends on network based restrictions. cloudtips.nl/source-ip-an...

💪🏻Together with my colleagues Robert and Wouter, we migrated 100 VMs this weekend, phased out the old RDS farm, introduced AVD with six host pools and 125 VMs, and migrated fourteen locations from IPVPN to fiber and DSL via SDWAN to vWAN. Grateful for the gift and happy to help innovate IT platforms.

🎄 It is December at the North Pole. The elves are rushing around, workloads are flying everywhere, and even Santa is complaining that he has too many permissions. It is clearly time to bring some order with a bit of Bicep magic. cloudtips.nl/the-north-po...

⚡Adding Intune P2 features to Microsoft 365 E3 and E5 is getting a lot of well-deserved attention, but did you see the blip that isn't? Some Defender for Office P1 features are coming to E3 and E1 in 2026! 📧 www.microsoft.com/en...

🔥 It is here. Microsoft Entra Kerberos authentication for cloud only identities on Azure Files SMB is now available in preview. This makes it possible to access Azure Files without any domain controllers or hybrid identity requirements. cloudtips.nl/microsoft-en...

When remote users connect through a Point to Site (P2S) VPN in Azure Virtual WAN, you can route all their traffic including internet bound traffic through Azure Firewall by pushing a default route (0.0.0.0/0). This approach is commonly referred to as forced tunneling. 🔥 cloudtips.nl/secure-your-...

Enjoying vacation 💪🏻

[Share] 🔥 Microsoft Ignite 2025 Next Steps After attending Microsoft Ignite 2025, your next steps to continue your learning journey! #msignite #mvpbuzz

In this blog, I will demonstrate how to use Azure Container App Jobs to automate tasks with Microsoft Graph. For example, you might want to back up your Conditional Access rules from Entra ID to a secure location, such as an Azure Storage Account. 🔥 cloudtips.nl/automate-mic...

In this blog, I’ll demonstrate how to automate Privileged Identity Management (PIM) in Azure Landing Zones using Azure Bicep and the Microsoft Graph Provider, powered by Microsoft Entra ID Governance. cloudtips.nl/microsoft-en...

Bring Microsoft Learn content straight into your AI assistant or app with the Microsoft Learn Model Context Protocol (MCP). cloudtips.nl/why-you-shou...

This week's Entra newsletter is out. Get it at https://entra.news

🚨 The Terraform MSGraph provider is a gamechanger. Today, I will show how you can use it to improve your Entra ID configuration and strengthen your security posture. cloudtips.nl/managing-ent...

I just sent out this week's Entra newsletter. 🚀 Most popular posts from last week 🥇Microsoft Introduces Restore Capability for Conditional Access Policies • Tony Redmond 🥈Why Setting Office IP as a Trusted Location in Conditional Access Is Risky • AIMA

🔥 Want to know how you can segment remote users in Azure Virtual WAN when they connect over Point to Site (P2S) VPN? cloudtips.nl/how-to-confi...

Today, @merill.net I are thrilled to announce the release of the new version of Maester on Azure Web App. cloudtips.nl/new-version-...

We just sent out this week's Entra news. Check it out at entra.news/p/entra-n...

☁️ Want to know how you can add an extra layer of protection to your Azure Backup setup? cloudtips.nl/keep-hackers...

🔥 Want to know how you can securely call Microsoft Graph from your Azure DevOps pipeline without relying on long lived secrets? cloudtips.nl/automating-m...

cloudtips.nl/expanding-az... It is now also possible to create Azure Maintenance Configurations for Virtual Network Gateway and Azure Firewall. In this blog I will explain why this is important and how to deploy it using Infrastructure as Code with Azure Bicep. 💪🏻

We just sent out this week's Entra newsletter. Get it at https://entra.news/

Time to enjoy vacation time in France! 🇫🇷

🚨 New in Maester! A dedicated Azure configuration section is now available to help you monitor and secure your Azure setup with automated tests. In my latest blog, I show you how to get started and walk you through the tests available today. cloudtips.nl/monitor-your...

💪🏻 Want to supercharge your Azure Bicep deployments? GitHub Copilot Custom Instructions are the key! I tested the Bicep Best Practices instruction from the official repository and it’s a real gamechanger. cloudtips.nl/power-azure-...

🔥 It’s here! The new msgraph Terraform provider is in public preview, letting you define your Microsoft Entra tenant setup directly in Terraform files. cloudtips.nl/terraform-fo...

In this video, I will demonstrate how to deploy a Microsoft Entra External ID tenant using Azure Bicep and configure authentication for an Azure App Service that uses it. 💪🏻 youtu.be/Ub2zXbbqJXE

Microsoft Security Copilot uses advanced generative AI to help security teams make rapid, scalable decisions and respond effectively. Today, I will show you how to deploy Microsoft Security Copilot using Azure Bicep 💪🏻 cloudtips.nl/deploy-micro...

Lately, I have been working on a new repository containing Entra ID PowerShell examples. This work also inspired me to create PowerShell scripts for Administrative Units. 💪🏻 cloudtips.nl/deploy-micro...

This week's Entra news is out with a LOT of features hitting GA and a new (and important) public preview. Check it out at 👉 entra.news

🎉 I am grateful and proud to share that I have been awarded as a Microsoft Most Valuable Professional (MVP) in the technology areas Azure Infrastructure as Code and Identity & Access, part of the categories Microsoft Azure and Security.

Recently, I was asked how to assign Microsoft Graph permissions using Azure Bicep. That’s why today I’ll show you how to assign Microsoft Graph permissions using Azure Bicep. cloudtips.nl/assign-micro...

Announcing GA of Bicep templates support for Microsoft Entra ID resources techcommunity.micros... #MicrosoftEntra #MicrosoftSecurity #Cybersecurity #Azure #AzureAD #Identity #CloudSecurity

This week's Azure Update is up. youtu.be/fcdA1iVrrYw LinkedIn - www.linkedin.com/pulse/azure-... #azure #cloud #microsoft #cloudcomputing #microsoftazure #azurecloud #azureadministrator #azurearchitect #microsoftcloud #azureupdate